Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
File:                     ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft (raw, json)
Hash identifier:          Ve1tZuyojzjfiVvrsdUfxphZ+FdTh+FyqSZzUXlKIpg=
Subject key identifier:   F1:51:7B:83:09:F4:B6:2E:9A:97:10:15:AB:BB:D5:B2:1D:AF:A0:A2
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0129
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
Manifest number:          09C5
Signing time:             Fri 06 Jun 2025 12:07:51 +0000
Manifest this update:     Fri 06 Jun 2025 12:07:51 +0000
Manifest next update:     Sat 21 Jun 2025 12:07:51 +0000
Files and hashes:         1: 2lg-VbmJh0zvx5FO93s2avv-56U.roa (hash: FxO2grDkLehSbdZKfWIrMVBPVxzXVZN4IdTL6UrRgRk=)
                          2: 8mwKQiqCD2aXoJunjpGmiU17EpA.roa (hash: CSwaQs2LidvAm2hovappKSEI2hw1yaZKIlANNLU0UpA=)
                          3: CgbNhne8NGlUQSniEfZu5CNdVH4.roa (hash: z0N7VJaKjtpBv7h2Wn+v6QJVn1lrABva4NWYd4PhmuI=)
                          4: ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl (hash: +J8YWjmDnMDjRi88UPy7YQH3wPPer0hLf1rIh04tSr4=)
                          5: EBMWtj6YWvjWQiC_W43-AuAbcu0.roa (hash: D1vk15EQkFu0ka+STT+7t5ZzLvjYl7Pg0lHylI9yRIc=)
                          6: FKtvVlASZd0A3gkoDDFhTFGcsY8.roa (hash: Rrh1Jp84uBeFLSMGZglmdW+q4BaKJImEFkNS3BN51UQ=)
                          7: G8KwsliqW15T47aiAYMnXe4jlm4.roa (hash: xn6zcq85FPyB2r5ifz93hawDmfQ82IbGy74MEiOX7Mk=)
                          8: JRa79PRv1FJrOCNeMiWpKq94Rbk.roa (hash: AneWSnVhqNrKvpS6KCh5HITray/zhE/skvZ8pVYINek=)
                          9: KCiQVuBn8IHJVws-iesLMcGRBBQ.roa (hash: POukAMGTmHMpeQO/7OmrkGtK2qqAVDbtE+M5WEAGusk=)
                          10: Kv8GOn45RM5sbdA5Zl-QN7kIZGA.roa (hash: wI6jHZQN1y9Z1KcVSqjUof63pNgfXQWw6FScIc5EAOg=)
                          11: Mq_wOfr46Zy6oh9j1YqMZQWQHgU.roa (hash: UUg9H2KIiTC6w7J2PWEZo25DEuxU4bKWhDTIMO0xoRo=)
                          12: Qm-ovxjft_ONKgVlddgYBViiXI8.roa (hash: reNHyL6JrrdFmS7tyh8caGRlR5ntXNFETd8Vu4ktyXE=)
                          13: SitDxheAMfSlRQgc01mqDiL-mfU.roa (hash: Bs/CaB9/cVEG8i9wwL4Aup/Y+iaGM5ZkYBzfSYB5hd0=)
                          14: T_31eBaEFihdMCMV6faFBqsLDa0.roa (hash: IFsJZ7Je3JKurRpwIsfwQfmVzUkHijSgyjwh2OuJ1vU=)
                          15: Ue7TEqZ4iGU9E36_JaqZLQmFN80.roa (hash: LMtSwcrsVLbwEXrYErZXwlFirOCIc0pimy+TAXS/OB0=)
                          16: W-ERzt8krj8uYmR9nPsp_bw-FVM.roa (hash: PTzn1mwLEcrFNjvKFBdbw8tSBBY1xaWCqNG9Z2W6o0A=)
                          17: _2vVWVtlxiNX5IdifzTsGlLnWX0.roa (hash: p+uVz1VSXvLPtweai3CUwuWHCZq8CIc9maBVSE11k6w=)
                          18: bRwxq6NCWThnL83iQFV_HL15SUg.roa (hash: i3aC46cXL9KmCjIe66+tAM/MBKoXFW6/N3LHKukn9k8=)
                          19: gaIp2PTKDss6G0iK8BZK3a9w_Z0.roa (hash: /aIlc2OS9hlnuWkP9f8wkaLvVAArXgRjPkai7Ejv5Yo=)
                          20: lXon4DXniV5aKkwr9PlRXv024TE.roa (hash: sIu/V/Vpr0oGmkjOyOZYEZz+cp1x4jSy+YAqvUB+J0s=)
                          21: oEvqGdCs79vxipQ8wdUhufn5vs4.roa (hash: JjHpEZ6DVpMBvK2L41vPa5kurHWTwuK2gx7LYg+I9xg=)
                          22: rRoyRHu5-qdPMNl12CJ70QFLET8.roa (hash: 1VDKZrAJbMcfSevIl7JpTkTn432yuA09/SrCTR7dhcw=)
                          23: ra-TXYiVIOMq3MVtooBVGRWW1Y4.roa (hash: svelJ/UT0Op+w8rpWKjTWzg7DUB2LZChLSD6ZufiPdo=)
                          24: rnaO0T3Do29M9vmta4mYAana-ew.roa (hash: 8WyNhwXG0IULzVGaRAtYo8gXCYgLU0CLb47J7GdVVrs=)
                          25: uLNdVqrtM2H06A254Lmga8jPtsQ.roa (hash: 8heNLJS0Zpf9SIEd1gdJgGcIpF5JJpa+ClaqaXFXhcc=)
                          26: uiGjxLYcHAmP1EArk8lK8UmLX6M.roa (hash: m+r/NshK5m3nmSDw8sxn1h43xGX46+cF3TZ0PQNVykw=)
                          27: uzyJSuse6WoNdXDUOBy2EDoPJUw.roa (hash: OpdmGxt481tFVylzrIiY22cobOHfN3RLXmskbwT8XzE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 15:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May 23 09:51:18 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=F1517B8309F4B62E9A971015ABBBD5B21DAFA0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:ec:42:d2:1b:98:28:f4:69:bc:02:3b:04:
                    38:3a:e5:35:11:b9:c1:ea:9b:b1:5e:9f:2d:dd:29:
                    3c:24:12:c7:32:29:fb:8a:8b:25:36:09:96:92:1a:
                    58:ea:cf:b0:f7:08:b9:b2:21:cc:86:40:ed:6a:9a:
                    bf:01:be:14:44:6a:18:89:7b:93:f6:74:ff:e4:fd:
                    3c:07:ea:0f:bd:dc:05:6f:f7:31:5f:56:66:b8:5f:
                    be:b4:b3:1c:7c:c3:f8:c1:dc:be:96:b1:da:71:e4:
                    c7:b6:ac:b5:df:f8:b5:d4:4f:f0:bc:2b:80:be:6a:
                    07:9d:93:55:82:67:42:8b:09:5c:06:08:38:5b:07:
                    54:7a:9e:c8:fa:e2:f8:a1:8e:75:c7:b5:c8:58:57:
                    eb:46:68:e9:1a:b2:96:08:e8:8b:9a:52:66:23:bf:
                    df:3b:16:b9:02:41:a4:8d:7f:76:42:9c:9c:01:85:
                    18:03:b2:a7:86:a3:02:1e:03:de:78:eb:d9:94:43:
                    b2:44:92:5e:6c:d3:be:a3:fe:91:92:e7:ae:6d:3a:
                    88:75:24:00:24:16:77:06:ef:ae:96:54:af:cf:b0:
                    04:cb:c6:a9:e8:62:e3:83:2e:ec:93:31:55:10:89:
                    ab:03:50:05:f9:17:21:c9:e8:b7:0f:16:a6:4d:f6:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:51:7B:83:09:F4:B6:2E:9A:97:10:15:AB:BB:D5:B2:1D:AF:A0:A2
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ee:93:a2:73:d9:43:7a:11:b7:2a:49:2e:3d:d9:83:31:c8:
         72:b6:d2:c4:ce:aa:ba:eb:9d:a1:6b:e7:68:73:2c:34:56:eb:
         13:c3:e9:a4:d8:f5:6d:4d:3a:e5:7e:8f:48:2e:05:e2:38:b4:
         e4:c8:86:e2:9e:4b:e7:f2:22:3a:bf:c7:a9:df:95:7d:11:7d:
         b3:61:28:f9:16:bd:33:9b:ae:0c:38:88:6d:7c:52:5f:c5:ad:
         86:6f:33:f7:05:f2:c5:12:31:cf:af:ae:89:5f:b4:a7:b0:df:
         b2:be:47:a7:42:93:a0:07:b7:78:a1:bb:2b:ee:0e:7d:fa:cb:
         3e:61:53:4c:ba:fb:53:84:43:d9:62:68:4f:53:5e:4d:d7:c9:
         50:1a:5a:96:67:4e:9e:84:cb:0a:54:2f:ec:69:d2:c9:7a:fc:
         26:72:0f:4c:e9:0b:1c:98:64:c7:31:fa:bd:b5:31:65:24:73:
         f2:8a:04:2c:89:54:c2:3f:5e:9b:0d:36:51:2a:5c:a1:ef:88:
         f7:f3:3a:6b:37:b6:af:94:16:7a:1a:66:53:d4:3e:e0:31:8c:
         33:83:9d:f4:41:ee:a3:97:cc:f1:dc:25:ca:89:d4:f0:8d:fe:
         e7:aa:8f:02:98:a1:b9:98:00:ac:0a:b6:15:a8:67:eb:f2:cf:
         d7:87:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:30:05 2025 by rpki-client